USN-2945-1
xchat-gnome vulnerability
It was discovered that XChat-GNOME incorrectly verified the hostname in an SSL certificate. An attacker could trick XChat-GNOME into trusting a rogue server's certificate, which was signed by a trusted certificate authority, to perform a machine-in-the-middle attack.
What each source reports
OSV No score
xchat-gnome vulnerability
It was discovered that XChat-GNOME incorrectly verified the hostname in an SSL certificate. An attacker could trick XChat-GNOME into trusting a rogue server's certificate, which was signed by a trusted certificate authority, to perform a machine-in-the-middle attack.
- Record
USN-2945-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xchat-gnomeUbuntu:14.04:LTS |
before 1:0.30.0~git20131003.d20b8d+really20110821-0.2ubuntu12.2, plus listed versions 1:0.30.0~git20110821.e2a400-0.2ubuntu91:0.30.0~git20110821.e2a400-0.2ubuntu101:0.30.0~git20110821.e2a400-0.2ubuntu111:0.30.0~git20110821.e2a400-0.2ubuntu121:0.30.0~git20131003.d20b8d-2ubuntu11:0.30.0~git20131003.d20b8d+really20110821-0.2ubuntu121:0.30.0~git20131003.d20b8d+really20110821-0.2ubuntu12.1 |
1:0.30.0~git20131003.d20b8d+really20110821-0.2ubuntu12.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-2945-1 is a vulnerability with no CVSS score yet in xchat-gnome, published April 4, 2016. No source lists public exploit code. Fixed in xchat-gnome 1:0.30.0~git20131003.d20b8d+really20110821-0.2ubuntu12.2.